$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d64e0424-1427-3203-8b9d-0ac7ba6b1b35.roa File: d64e0424-1427-3203-8b9d-0ac7ba6b1b35.roa (raw, json) Hash identifier: FMIJ7g/gb5EoFSTNiOQhnbGyiN3eNyixk/DqzXslyXQ= Subject key identifier: 1C:63:4F:42:00:B8:32:8D:EE:E3:CA:F9:00:90:AC:78:C4:78:EA:0E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584A54070446AEC3BDD406885CA4 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d64e0424-1427-3203-8b9d-0ac7ba6b1b35.roa Signing time: Fri 27 Jun 2025 08:02:48 +0000 ROA not before: Fri 27 Jun 2025 08:02:48 +0000 ROA not after: Thu 25 Sep 2025 08:02:48 +0000 asID: 9304 IP address blocks: 66.253.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:07:04:46:ae:c3:bd:d4:06:88:5c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 27 08:02:48 2025 GMT Not After : Sep 25 08:02:48 2025 GMT Subject: CN=0b578f85-6533-4173-9c86-c8574fd49022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:69:ea:13:59:f2:56:b8:11:21:68:3a:39: ee:c0:f2:27:b1:5c:bf:26:17:2f:0b:10:87:f5:c6: d6:1f:33:50:51:d2:d8:28:fb:96:52:75:a2:62:2f: bb:08:68:51:f0:05:eb:db:ee:c5:59:f2:e7:7b:35: 70:e7:82:3a:08:8c:b5:82:aa:0f:b7:59:86:6d:ff: 85:a6:e6:6a:16:13:c1:eb:50:21:bb:35:ed:3c:8f: b1:1e:78:e6:7d:4d:43:ee:b6:59:00:a6:38:97:54: 36:93:ea:ff:6c:c1:72:95:4d:91:c0:ce:89:b0:17: b1:e5:c6:45:5d:f6:18:fb:0f:8b:f2:d4:e4:2b:ff: 98:b4:aa:e0:6e:e9:f3:33:87:33:db:f2:74:15:11: 22:5b:2b:4e:84:26:e1:c5:63:ed:10:10:5b:b5:80: a0:50:c6:f7:e8:48:2d:12:71:d1:b1:77:7a:dc:4e: 2c:97:12:dc:fe:a1:97:14:67:cd:cd:c5:90:6f:3d: 01:25:86:dc:fc:03:c0:51:dc:20:a1:4a:cb:b8:cf: 29:e0:ee:93:fb:8f:28:e7:84:dd:0d:7d:9b:6f:ee: a2:fa:90:c7:a6:00:dc:c2:44:0a:59:61:c6:97:c8: c2:2c:f6:0c:d3:f3:66:20:6a:9c:ff:32:4c:79:62: ce:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:63:4F:42:00:B8:32:8D:EE:E3:CA:F9:00:90:AC:78:C4:78:EA:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d64e0424-1427-3203-8b9d-0ac7ba6b1b35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:04:83:7a:e8:66:eb:95:9d:40:0b:22:02:be:15:de:49:72: c4:57:1c:37:a6:fa:f3:f4:b8:b8:ea:bb:33:c0:84:01:1f:93: 16:ec:8b:bc:67:c6:72:ad:7c:f8:c0:3b:ad:1f:b2:47:a8:61: 79:8b:7d:28:87:79:4a:94:af:30:67:bc:7c:c1:c4:92:c3:b6: 1e:0e:7a:4a:b2:e8:c3:5d:83:61:1e:12:bc:8e:f9:96:16:91: ed:51:6c:d0:1e:1d:18:f6:1a:a8:60:ce:db:bc:b4:c4:e7:16: 16:65:a6:59:30:3f:66:32:44:c6:b5:7a:96:51:e2:ba:9f:67: 56:b3:65:42:6b:ce:a8:7d:95:f7:71:1f:88:32:31:21:a9:30: 26:c0:07:b2:ba:c2:2b:7d:19:d3:bc:2e:80:ab:77:7d:d9:6f: 62:a3:fa:69:a7:7a:c7:db:0c:81:27:15:d3:40:69:c2:31:4c: 99:d3:f5:6c:28:6d:26:5e:32:a3:9d:3e:c2:0d:00:e8:a4:ee: 97:aa:c1:14:a4:30:91:e9:4b:06:7a:13:94:ce:40:e5:59:68: 37:cb:28:7b:58:77:f2:25:93:59:c8:90:6d:8e:77:f9:c7:57: 5c:f1:e4:3e:eb:74:a6:cf:5e:09:a2:77:ab:e6:63:9f:50:f1: 46:15:b0:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUBwRGrsO91AaIXKQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDYyNzA4MDI0OFoXDTI1MDkyNTA4MDI0OFowLzEtMCsGA1UEAxMk MGI1NzhmODUtNjUzMy00MTczLTljODYtYzg1NzRmZDQ5MDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1Np6hNZ8la4ESFoOjnuwPInsVy/JhcvCxCH 9cbWHzNQUdLYKPuWUnWiYi+7CGhR8AXr2+7FWfLnezVw54I6CIy1gqoPt1mGbf+F puZqFhPB61AhuzXtPI+xHnjmfU1D7rZZAKY4l1Q2k+r/bMFylU2RwM6JsBex5cZF XfYY+w+L8tTkK/+YtKrgbunzM4cz2/J0FREiWytOhCbhxWPtEBBbtYCgUMb36Egt EnHRsXd63E4slxLc/qGXFGfNzcWQbz0BJYbc/APAUdwgoUrLuM8p4O6T+48o54Td DX2bb+6i+pDHpgDcwkQKWWHGl8jCLPYM0/NmIGqc/zJMeWLOAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxjT0IAuDKN7uPK+QCQrHjEeOoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDY0ZTA0MjQtMTQyNy0z MjAzLThiOWQtMGFjN2JhNmIxYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv0DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsEg3roZuuVnUALIgK+Fd5JcsRXHDem+vP0uLjquzPAhAEfkxbsi7xn xnKtfPjAO60fskeoYXmLfSiHeUqUrzBnvHzBxJLDth4Oekqy6MNdg2EeEryO+ZYW ke1RbNAeHRj2Gqhgztu8tMTnFhZlplkwP2YyRMa1epZR4rqfZ1azZUJrzqh9lfdx H4gyMSGpMCbAB7K6wit9GdO8LoCrd33Zb2Kj+mmnesfbDIEnFdNAacIxTJnT9Wwo bSZeMqOdPsINAOik7peqwRSkMJHpSwZ6E5TOQOVZaDfLKHtYd/Ilk1nIkG2Od/nH V1zx5D7rdKbPXgmid6vmY59Q8UYVsME= -----END CERTIFICATE-----Generated at Fri Jul 4 06:57:50 2025 by rpki-client